yylcodex.cloud
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of yylcodex.cloud
The domain yylcodex.cloud appears to host a web-based administrative interface labeled "Codex LB" and "API Load Balancer." Based on the screenshot, the page is a password-protected sign-in portal rather than a public-facing content site, suggesting it may be intended for internal management, infrastructure control, or restricted operational access.
The domain name itself does not clearly identify a known organization, brand, or public service, and the available scan data does not provide operator details. The use of the .cloud extension, the infrastructure-oriented wording on the page, and the hosting environment suggest this may be a cloud-hosted service endpoint or administration panel rather than a consumer website.
Safety Assessment for yylcodex.cloud
This domain shows several cautionary signals at the time of this scan. It was flagged by 2 security engines for phishing-related activity, and it is also listed by a major threat database for social-engineering behavior. Those signals are more significant than a generic heuristic because they point to suspected deceptive or credential-harvesting activity rather than a simple technical anomaly.
Additional context also raises concern: the domain is very new, has no established traffic ranking, and presents a login page asking for an admin password without clear public branding or ownership information. While the malware scan did not detect malicious files in the limited content that was checked, a clean file scan does not outweigh phishing-related detections when the visible page is primarily a credential prompt.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate, which means traffic to the page appears to be encrypted in transit. It is hosted on infrastructure associated with Tencent Cloud, with the server geolocated to Tokyo, Japan. The web server software and supported protocol details were not identified in the provided scan data.
From a configuration standpoint, the domain is very recently registered and DNSSEC is unsigned, so DNS responses do not appear to have DNSSEC validation protection. No malicious external links, referenced domains, or iframes were identified in the limited page analysis, but the combination of a fresh domain, restricted login interface, and phishing-related blacklist signals remains a technical concern at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?